local_settings.yml

ip_address_whitelist:
   - 127.0.0.1
   - 1.2.3.4
   - 5.6.7.8
whitelisted_pages:
   - /assets/.*
   - /
   - /login

rack-attack.rb

if LOCAL_SETTINGS['ip_address_whitelist'] && LOCAL_SETTINGS['whitelisted_pages']
  class Rack::Attack
    #if request.path.includes?(LOCAL_SETTINGS['whitelisted_pages'])
      LOCAL_SETTINGS['whitelisted_pages'].map! { |str| Regexp.new(str) }
      blacklist('allow whitelisted pages') do |req|
          LOCAL_SETTINGS['whitelisted_pages'].none? { |regexp| req.path =~ regexp }
      end
    #elsif remote.request_ip.includes?(LOCAL_SETTINGS['ip_address_whitelist'])
      blacklist('allow from localhost') do |req|
        !LOCAL_SETTINGS['ip_address_whitelist'].include?(req.ip)
      end
    #end
  end
end